plaid-fintech

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s runtime flow ingests outsider-authored free text from inbound Plaid webhook payloads (req.body) in the /api/plaid/webhooks handlers, which are queued/processed asynchronously.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly for Plaid fintech integration and contains code and patterns that enable direct money movement: it uses Plaid's Auth product to retrieve ACH routing/account numbers, performs identity verification, checks real-time balances, and calls an initiateACHTransfer routine to actually start ACH transfers. These are specific banking/payment actions (direct financial execution), not generic tooling.